Principal Security Engineer

Company Overview

Mastercard empowers economies and individuals across more than 200 countries by supporting diverse digital payment options. The company focuses on delivering secure, simple, intelligent, and accessible transaction methods through innovative technology, partnerships, and networks. Mastercard’s goal is to foster a sustainable economy where all can thrive.

Role Summary

The Principal Security Engineer acts as a trusted consultant and collaborator for development teams, offering hands-on assistance, coaching, and real-time advice to integrate security naturally into software development processes. This position is instrumental in shaping how security and threat modeling are taught, adopted, assessed, and governed throughout Mastercard's development lifecycle, prioritizing accessibility and alignment with developer workflows.

Key Responsibilities

• Develop scalable, developer-friendly threat modeling resources such as blueprints, threat libraries, and templates.
• Implement and refine threat modeling approaches to ensure effectiveness and adaptability.
• Establish and maintain review and governance frameworks to ensure consistent and high-quality security outcomes.
• Design and deliver educational and enablement initiatives to empower engineers and architects in applying threat modeling confidently in their daily activities.
• Collaborate closely with development teams to embed security seamlessly into workflows, enhancing delivery without obstacles.

Candidate Profile

The ideal candidate is a seasoned security expert with extensive hands-on experience in threat modeling and secure software design, comfortable working at scale and influencing multiple teams. They demonstrate deep technical knowledge coupled with strong coaching and communication abilities, passionate about fostering practical, developers-centric security methodologies. Success in this role requires thriving in collaborative, continuously improving environments that emphasize excellent developer experience.

Corporate Security Responsibilities

• Comply with Mastercard's security policies and practices.
• Maintain confidentiality and integrity of accessed information.
• Promptly report any suspected security violations or breaches.
• Complete all mandatory periodic security training as outlined by Mastercard.